BraveSentry removed? - problems remain

[pkraft]

got it. it's the + / - keys

will continue on now.

[pkraft]

Did this - asked if I wanted to replace explorer.exe - I said yes.

rebooted to the harddrive - desktop is still blank. This time an error showed:
"windows explorer has encountered a problem & needs to close"

Anything else we can try?

pk

[jholland1964]

Pk, do you get any other info with this error?

[pkraft]

It was in the windows explorer error window that asks if you want to send a report to ms. I can select "....error report contains" & the Error signature contains "AppName: explorer.exe, AppVer: 6.0.2800.1106, ModName: kernel32.dll, ModVer: 5.1.2600.3119, Offset: 0000ae13"

Then I can select '...tech info about error report'. There's a very long list of items (too long to try to retype correctly) & at the bottom of this screen it says: "...following files will be included in this error report. C:\DOCUME~\ADMIN~1\LOCALS~1\Temp\a263_appcompat.tx t"

That's it. pk

[ShadowPuterDude]

OK, we are going to replace the copy of LSASS.EXE and WINLOGON.EXE in the System32 folder with the copies in the I386 folder on your XP CD.

Boot to the recovery console. At the Command Prompt:

Type the following commands at the command prompt, pressing enter after each command:
expand D:\i386\lsass.ex_ C:\windows\system32\
expand D:\i386\winlogon.ex_ C:\windows\system32\
exit

Replace D with the drive letter for your CD Drive.

Reboot to Normal Mode.

What happened?

[pkraft]

When the 'Welcome to windows' screen comes up an application error box also comes up & shows winlogon.exe - application error. The instruction at "0x00000001" referenced memory at "0x00000001". the memory could not be 'read'. I have the optrion to terminate the program or debug.

[ShadowPuterDude]

OK,

Things are pretty well borked at this point. Your options are:

1. Use a Linux "Live CD" and backup your data, then do a "Clean" Install of XP.
2. Do a "Repair" Install and backup all important data then do a "Clean" Install of XP.
3. Do a "Parallel" Install of XP, boot to the New copy and try to clean the system. (A repair Install may still be necessary to get the old install to work after we clean it)
4. Do a "Repair" Install and we can attempt to clean up the system.

Your choice.

[pkraft]

OK,

Things are pretty well borked at this point. Your options are:

1. Use a Linux "Live CD" and backup your data, then do a "Clean" Install of XP.
2. Do a "Repair" Install and backup all important data then do a "Clean" Install of XP.
3. Do a "Parallel" Install of XP, boot to the New copy and try to clean the system. (A repair Install may still be necessary to get the old install to work after we clean it)
4. Do a "Repair" Install and we can attempt to clean up the system.

Your choice.

1. I don't know what a Linux 'Live CD' is. Can you explain this to me or point me to a site with info?

2. With a repair install of XP would I lose my files?

3 & 4 - I don't think I want to try to repair this install. I'm in favor of reformatting the drive for a clean install once I have my files.

I have two drives on this computer. The slave drive has a good portion of my data & client files on it. I'm not sure that there's enough room for an XP install. But I do have a new harddrive that I have not done anything with yet .... If I swap out the current slave drive with the new one, install XP on it, couldn't I boot off of that drive, transfer the files I need to save and then do a clean install on the infected drive?

Not knowing about option #1, option #2 sounds good if it doesn't involve losing my files or ??

As I noted in an earlier post, Norton's doesn't seem to have worked well for me. Can you tell me your thoughts on what I should be running on my system to help prevent future problems. I do have a router and will be replacing that with one that has a firewall.

Appreciate your help!

Thank you,

Priscilla

[ShadowPuterDude]

If you do a clean install on a new drive you can slave the infected drive and recover any files that way. Then you just need to remove the drive partition, on the infected drive, create a new partition and format the drive.

Your slave drive with most of your files should be fine.

EDIT: A repair install would not cause you to lose any files.

[pkraft]

I would like to try the repair install first.

Boot from the XP CD as I did before when going to the recovery console - then there's an option for repair install?